Privacy Policy.

1. Who we are

Alfacotex is a product of Asfire, Inc. ("Asfire," "we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and share information when you use the Alfacotex application, website, and related services (collectively, "the Service").

2. Information we collect

Account information

When you create an account we collect your name, email address, and authentication credentials. If you sign in through a third-party provider (Google, GitHub), we receive the profile information that provider shares.

Scan data

When you run a scan, the Alfacotex agent collects forensic artifacts from your device. By default this includes file metadata, process lists, network connections, registry entries, browser history domains, and system logs — not the raw contents of your personal files. For sensitive files (SSH keys, credential files, shell and browser history) the agent computes findings on your device — for example, whether a private key is unencrypted, how many suspicious commands are in your history, or which type of secret a configuration file contains — and transmits structured findings rather than the raw contents of those files.

Deep content scan (optional)

You may explicitly enable a "deep content scan" for an individual scan. It is off by default and requires your consent each time you run it. When enabled, the agent additionally reads the raw contents of those sensitive files so they can be included in your forensic report. That content is transmitted to our servers and processed like other scan results, including by our third-party AI report providers (see "How we share information"). Enable it only when you need full-content forensic analysis.

Usage data

We automatically collect technical information such as your IP address, browser type, operating system, pages visited, and timestamps. We use this data to maintain and improve the Service.

Payment data

Payments are processed by Stripe. We do not store credit card numbers or bank account details on our servers. We retain transaction identifiers, amounts, and billing addresses for accounting and support purposes.

3. How we use your information

• Providing, operating, and maintaining the Service.
• Generating forensic reports and threat assessments from your scan data.
• Sending transactional emails such as receipts, scan results, and security alerts.
• Detecting and preventing fraud, abuse, or security incidents.
• Improving our models, algorithms, and detection capabilities using aggregated, de-identified data.
• Complying with legal obligations and responding to lawful requests.

4. Data sharing

We do not sell your personal data. We share information only in the following circumstances:

• Service providers. Hosting (Contabo), payment processing (Stripe), email delivery, and analytics providers who process data on our behalf under contract.
• AI providers. Scan results may be sent to third-party AI providers (such as Anthropic) to generate forensic reports. These providers process data under strict data-processing agreements and do not use your data for model training.
• Legal requirements. When required by law, regulation, or valid legal process.
• Business transfers. In connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. Data retention

Account data is retained for as long as your account is active. Scan reports are retained for 12 months after creation, unless you delete them sooner. If you close your account, we delete your personal data within 30 days, except where retention is required by law.

6. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security audits. No system is completely secure. If you discover a vulnerability, please report it to security@alfacotex.com.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You may also object to or restrict certain processing. To exercise these rights, contact us at privacy@alfacotex.com. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You can control cookie preferences in your browser settings.

9. Children

Alfacotex is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice in the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, contact us at: